What is vulnerability risk classification ?
Every vulnerability hole that was found is classified as either high,medium or low risk. high risk means that organization’s private assets are vulnerable and easy to get direct access to. The probability of theft or alteration of those assets is high. Medium risk means that an attacker can also gain access to the organization’s private assets but will have to exploit multiple medium risk vulnerabilities. Low risk means that an attacker does not have a direct access to the organization’s private assets, but provides information that might help him to gain that access.
